Study. uk . com
  1. Home
  2. All questions
  3. Question 935

CISM study material · question 935 of 1000

What separates an exercise from a test in NIST's terminology?

  1. An exercise produces a formal after-action report at the end of it while a test does not produce a written report of any kind at all for it
  2. An exercise validates the plan through discussion or simulated execution, deliberately outside the actual operational environment
  3. An exercise involves the senior management of the whole of the organisation while a test involves only the operational staff who are on duty
  4. An exercise is scheduled well in advance with all of the participants while a test is deliberately left entirely unannounced to every one of them beforehand here
Show the answer

Answer: B. An exercise validates the plan through discussion or simulated execution, deliberately outside the actual operational environment

SP 800-34r1 defines an exercise as a simulated event that validates a plan through discussion or simulated execution without using the actual operational environment, whereas a test is conducted in an operational environment with quantifiable metrics.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.5.3 Exercises

Challenge yourself on this topic → Study as cards